adam/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-08-07 17:23:04 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix bug 1856 : CSRF issue that allow to change admin password

Browse Source 
Merge from trunk

git-svn-id: http://piwigo.org/svn/branches/2.1@6903 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
nikrou
2010-09-13 20:17:41 +00:00
parent 25ca538c0c
commit 2c6ac64a9d
3 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
admin/profile.php
+5 -1
View File
@@ -25,8 +25,12 @@ if( !defined("PHPWG_ROOT_PATH") ) die ("Hacking attempt!");
$edit_user = build_user( $_GET['user_id'], false );
include_once(PHPWG_ROOT_PATH.'profile.php');
if (!empty($_POST))
{
check_pwg_token();
}
include_once(PHPWG_ROOT_PATH.'profile.php');
$errors = array();
if ( !is_adviser() )